Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't show users tools they can't access #35

Open
4 tasks
bengerman13 opened this issue Mar 26, 2021 · 1 comment
Open
4 tasks

Don't show users tools they can't access #35

bengerman13 opened this issue Mar 26, 2021 · 1 comment
Labels
epic:logging-auth See https://github.com/cloud-gov/product/issues/1725 squad-observability squad-success

Comments

@bengerman13
Copy link
Contributor

bengerman13 commented Mar 26, 2021

In order to improve user experience, we want to hide OpenSearch apps users don't have access to.

Acceptance Criteria

  • GIVEN an app shows up in the menu
    WHEN I click on it
    THEN I should not receive a permissions error
  • GIVEN I do not have permissions for an app
    WHEN I look for it in the menu
    THEN I should not see it

Security considerations

This should not change security, only user experience

Implementation sketch

@mogul mogul added the epic:logging-auth See https://github.com/cloud-gov/product/issues/1725 label Apr 18, 2022
@mogul mogul changed the title Hide apps without permissions Don't show users tools they can't access May 12, 2022
@markdboyd
Copy link
Contributor

Unfortunately, there is no granular system for showing menu links based on user permissions: opensearch-project/security-dashboards-plugin#857.

So this issue is blocked until Opensearch implements some sort of granular permissions system for menu links.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
epic:logging-auth See https://github.com/cloud-gov/product/issues/1725 squad-observability squad-success
Projects
None yet
Development

No branches or pull requests

3 participants